Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: qGKnIeklmKeJQJmBZNJNcdjbzfLSZwEiz6GdZ2xXkdY=
Subject key identifier: 0B:6A:3F:72:60:C9:A1:29:7E:CB:B0:98:FE:11:E3:0B:ED:CF:D2:EB
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019E1CB50AB126D3A5DD07F7E1E05C73FD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0CDD
Signing time: Tue 12 May 2026 15:01:27 +0000
Manifest this update: Tue 12 May 2026 15:01:27 +0000
Manifest next update: Wed 13 May 2026 15:01:27 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: P6G//k/NIBGLNuUmuREkXAL7hjgVUzqW04LGXUUJo8w=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:0a:b1:26:d3:a5:dd:07:f7:e1:e0:5c:73:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: May 12 15:01:27 2026 GMT
Not After : May 13 15:01:27 2026 GMT
Subject: CN=0b6a3f7260c9a1297ecbb098fe11e30bedcfd2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:4d:b1:04:94:33:fb:16:49:a7:c1:bd:09:
c0:0b:b4:26:d8:d0:de:74:19:1e:6b:a3:e9:51:b4:
6d:d8:9c:fa:a2:82:52:62:4d:d9:97:dd:e8:34:b6:
45:f5:72:9b:fe:05:51:37:95:6c:a3:de:84:3b:65:
e7:90:a2:c3:d2:56:5d:7b:a4:a5:e8:33:63:79:4f:
39:17:97:d7:e7:19:8a:25:60:6b:46:5f:55:c0:e3:
0a:57:32:bf:b0:1e:dc:59:8c:37:ab:66:9f:a7:b7:
0a:20:82:26:de:03:16:6a:ca:f9:0a:88:d4:86:30:
d7:e2:bd:43:90:5b:f0:1b:7c:be:5e:8a:87:4e:cd:
b2:37:af:c8:28:d1:a5:a3:59:a5:72:82:6e:80:aa:
84:b3:f8:08:df:50:60:1a:6b:b5:60:26:b2:45:93:
b6:a9:24:14:8b:fb:36:23:24:68:62:ec:c1:c0:98:
0c:b2:bd:bf:62:cb:8b:f9:75:4a:fb:36:fe:63:8d:
7a:4e:f2:a7:ef:35:bb:76:da:35:fb:f3:a6:eb:6e:
9c:a4:f0:53:22:30:fb:77:fe:1a:00:5d:60:f9:60:
d1:cf:71:70:a2:9c:af:4a:a0:f6:e1:7e:f0:10:08:
21:62:0e:ce:24:23:0d:20:7a:82:30:9b:39:a2:9a:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:3F:72:60:C9:A1:29:7E:CB:B0:98:FE:11:E3:0B:ED:CF:D2:EB
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:13:17:b7:64:97:24:b2:d6:76:29:9b:f8:0e:28:28:91:63:
12:c1:22:66:89:c5:25:49:3a:a4:10:2d:eb:74:63:ae:3c:1b:
f8:d8:1a:d5:4a:b8:f5:98:7a:eb:c1:6e:ef:7b:48:6b:e1:f2:
1a:57:5a:74:f4:11:26:e8:72:2d:73:c6:91:e8:16:44:0c:ac:
93:ed:ca:6f:24:42:e2:bb:31:69:d9:8f:00:83:16:a1:b5:4c:
19:cf:74:c0:4a:1c:67:cd:46:4d:08:05:e0:1e:ea:b2:86:57:
1e:39:c3:67:fc:57:44:50:c6:3f:62:b7:83:09:76:38:33:b5:
f0:9d:12:da:e8:92:75:fb:09:88:84:e1:43:53:d7:75:22:09:
e7:83:3c:60:8e:47:00:a3:d9:2e:38:c4:01:f1:fb:7e:8d:60:
ab:ef:69:88:12:5a:d2:51:29:ea:95:8a:b3:ba:ac:fa:2e:e2:
b5:61:e9:d2:ba:b3:53:ed:9d:de:ff:b0:80:bc:84:c7:b7:b2:
89:bb:01:0f:60:34:da:81:eb:45:24:79:be:e1:e6:f8:5a:5d:
4c:ca:a1:d8:19:28:da:e2:5b:7a:c6:89:1a:05:77:94:ee:ff:
97:cb:80:f5:55:19:d3:88:43:6c:3d:3b:c5:b7:d7:26:fd:c6:
c0:d5:f2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:13 2026 by rpki-client